Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: 9wfyo/bBMYk8owp6ZWieEOqJYWaiUbminZMXEX97ONM=
Subject key identifier: C2:67:1A:A3:D3:2F:92:DB:E0:7E:6B:D0:15:A8:DF:83:EE:64:10:E5
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019D9B504FA3D5E4DFB419C285B1C9087181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:24 +0000
Manifest this update: Fri 17 Apr 2026 12:00:24 +0000
Manifest next update: Sat 18 Apr 2026 12:00:24 +0000
Files and hashes: 1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: oa+MAKvA/DzWGeo2OyCrY2hdUSmrx1BzRBBrCHgyKBc=)
2: uggilkPXIQowDX7IENHctXgTYrc.roa (hash: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4f:a3:d5:e4:df:b4:19:c2:85:b1:c9:08:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Apr 17 12:00:24 2026 GMT
Not After : Apr 18 12:00:24 2026 GMT
Subject: CN=c2671aa3d32f92dbe07e6bd015a8df83ee6410e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:2f:70:fb:06:db:7b:02:e2:01:6e:82:44:
a7:fe:c8:f0:a4:54:53:79:a9:9c:66:67:4b:c3:e4:
cd:77:f0:5d:ae:83:a7:a4:3d:7e:69:11:fc:b9:74:
cd:73:b3:26:43:bd:0d:a2:0d:21:31:02:9e:95:b0:
02:2a:a3:02:13:ec:89:e0:b6:b2:5c:67:0e:2d:e4:
d6:45:47:6d:26:fa:fc:87:e7:d2:f6:40:f9:d2:e3:
be:9a:28:55:e9:28:33:a9:bb:08:a8:3b:13:f7:63:
c3:cf:f5:4c:47:7f:66:06:60:e9:46:19:35:33:60:
96:d5:16:6f:85:c5:98:b4:30:0b:9f:f8:c7:f1:36:
27:b3:8b:af:16:09:c6:67:89:bc:f6:d1:37:8d:d6:
b1:fa:be:f3:2b:36:2a:ef:f4:f5:a3:90:d4:02:41:
92:20:af:49:73:24:86:4e:db:9b:e9:81:9a:92:ef:
69:32:f0:b7:f2:de:6a:da:65:3f:5f:aa:9d:4b:3f:
8f:c2:a4:51:02:dc:7c:a3:59:56:5c:05:8c:ae:5a:
d4:15:df:a5:6d:e5:ac:3e:3c:e7:d3:24:6b:e6:07:
58:d8:00:7d:a0:22:00:3c:f0:9c:d5:bb:01:07:03:
5f:b1:7b:c1:9f:dd:d2:42:2c:91:43:7c:39:d2:bb:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:67:1A:A3:D3:2F:92:DB:E0:7E:6B:D0:15:A8:DF:83:EE:64:10:E5
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e3:97:42:45:54:8b:67:0d:3c:44:32:c3:ee:b8:72:f7:6e:
03:cd:40:1a:26:1e:1a:37:74:97:39:1e:6d:06:0c:e9:79:4a:
5e:5a:d6:0d:5d:95:d0:c6:5e:41:9c:a9:62:3a:09:57:b4:bd:
5f:24:b8:d5:27:9b:68:9a:51:6b:d7:99:b7:ae:a8:80:6b:9e:
da:64:65:1f:17:44:b5:d9:63:78:15:46:0f:ce:37:71:bc:8a:
84:aa:8e:d4:eb:dd:ae:de:b3:7e:8f:c2:e1:4d:93:94:d6:c8:
6b:15:4d:b0:60:1f:27:6f:ab:85:c1:72:b6:a9:a0:65:51:e2:
87:f5:6d:b9:45:e8:fd:7d:3e:5a:82:fa:8d:4c:14:15:fd:d1:
52:59:a8:37:71:ab:3b:b4:cd:46:09:5b:e8:0c:ee:d6:60:2a:
6d:6e:bd:cc:32:63:f2:9a:c8:4f:6b:b2:7f:97:14:ed:cb:45:
ed:6e:c9:cb:7f:e6:61:25:73:4a:da:5b:c7:6c:9c:32:53:53:
30:a0:72:e3:59:57:9f:5a:92:ec:ca:36:31:53:c3:62:20:56:
e4:8a:06:b2:74:ac:2a:24:6e:c7:e4:58:98:8a:3c:a2:58:cd:
fd:29:c4:24:07:9d:d6:aa:3d:e2:21:61:0a:37:d3:4e:33:37:
df:1e:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:39 2026 by rpki-client